redis-semantic-cache
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill serves as documentation for a legitimate service from a recognized vendor (Redis). All external resources, including the
langcachePython package, documentation links toredis.io, and API endpoints, are vendor-owned and present no inherent security risk. - [SAFE]: The skill correctly demonstrates the use of environment variables (
API_KEY,HOST,CACHE_ID) for managing sensitive credentials, avoiding hardcoded secrets. - [INDIRECT_PROMPT_INJECTION]: The skill implements a semantic caching layer, which naturally processes untrusted user prompts and LLM responses, creating a standard surface for indirect prompt injection.
- Ingestion points: The
promptparameter inlang_cache.search()and bothpromptandresponseinlang_cache.set()(found inSKILL.mdandreferences/langcache-usage.md). - Boundary markers: Absent; the examples show direct interpolation of prompts and responses into the caching functions.
- Capability inventory: The skill performs network requests via the SDK and
curlto interface with the Redis Cloud API. - Sanitization: Not present; the skill assumes the application handles sanitization before or after the caching layer.
Audit Metadata